Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234332e302f32342d3234203d3e20323730363032.roa
File:                     3137372e38352e3234332e302f32342d3234203d3e20323730363032.roa (raw, json)
Hash identifier:          1/++AamRLmFpy6hLCNMeVU7yzDWXPl+uhcpTc4zzBZQ=
Subject key identifier:   0B:E7:E9:C2:68:2C:2E:F1:DE:E0:BE:20:63:3A:A5:AA:9C:15:9A:91
Certificate issuer:       /CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
Certificate serial:       405A63F73C0F3A808925D71EC44D9370EC709FD9
Authority key identifier: EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234332e302f32342d3234203d3e20323730363032.roa
Signing time:             Wed 27 May 2026 13:01:22 +0000
ROA not before:           Wed 27 May 2026 12:56:22 +0000
ROA not after:            Wed 26 May 2027 13:01:22 +0000
asID:                     270602
IP address blocks:        177.85.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.crl
                          rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5a:63:f7:3c:0f:3a:80:89:25:d7:1e:c4:4d:93:70:ec:70:9f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
        Validity
            Not Before: May 27 12:56:22 2026 GMT
            Not After : May 26 13:01:22 2027 GMT
        Subject: CN=0BE7E9C2682C2EF1DEE0BE20633AA5AA9C159A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ce:a2:43:30:74:0e:ed:7a:eb:ec:8d:74:2a:
                    9a:44:ab:6c:f0:4d:27:91:1c:de:e4:b5:00:ab:d1:
                    5a:cb:d2:8c:60:ce:f8:3d:3d:6c:ef:b0:c1:cc:74:
                    15:78:74:d1:77:74:38:cd:35:46:ed:bd:ab:cc:d4:
                    82:6b:62:70:76:3f:10:b0:15:9b:86:8d:f9:2b:4b:
                    68:2e:e1:6a:87:d9:b4:51:9f:38:68:eb:ff:92:f2:
                    f3:93:ad:1d:22:30:12:ed:41:b6:1b:a9:1b:a1:bc:
                    f6:cc:a8:2e:a9:06:03:9d:5d:92:e8:86:9c:ad:de:
                    3e:07:dc:3e:eb:96:cb:fb:df:62:88:d3:08:61:dc:
                    52:90:b1:31:dc:12:56:84:bb:48:f2:d4:10:ba:c2:
                    cc:02:13:86:8a:96:a0:89:7a:81:9b:05:ff:60:53:
                    86:d9:6e:c1:eb:19:17:bb:88:1b:e6:4f:93:ce:5c:
                    13:a0:20:81:e6:82:fb:64:67:f5:a5:68:60:73:31:
                    4b:75:30:2d:2d:79:11:cd:19:97:ce:01:3d:af:75:
                    92:9f:d4:a5:1d:78:f0:8a:62:20:3f:0c:4f:c4:df:
                    c2:d2:55:fd:ad:16:5e:c7:75:58:b9:c9:6e:7a:5b:
                    b5:e1:13:e5:4c:37:33:1d:87:77:4a:20:fa:e7:5f:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E7:E9:C2:68:2C:2E:F1:DE:E0:BE:20:63:3A:A5:AA:9C:15:9A:91
            X509v3 Authority Key Identifier:
                keyid:EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234332e302f32342d3234203d3e20323730363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:bd:92:91:6e:44:4d:ba:16:2d:04:ab:7a:4e:d7:72:7d:23:
         a1:03:9b:ae:6b:a9:db:85:63:2f:da:07:21:cd:62:c7:34:5e:
         9e:d8:30:66:14:56:69:6b:9c:fb:92:8f:30:ce:d5:34:81:24:
         ed:d3:cf:4b:e8:cc:93:29:35:d9:b0:ee:09:07:df:a9:da:66:
         e9:e6:ae:ac:ac:5d:f0:44:26:f4:00:42:15:3c:fc:fb:9b:82:
         78:de:a9:86:2e:f4:c4:fb:07:36:f6:bf:b5:1e:ec:7f:de:89:
         e3:ca:21:d0:b2:84:ff:03:20:cf:ca:80:31:75:d9:27:e5:a6:
         1a:2d:64:b9:3b:69:01:f8:37:74:8f:dd:db:4f:28:4d:3b:cb:
         73:56:bf:18:dd:d2:ae:34:3d:b9:d2:0a:6c:45:90:47:0a:60:
         12:94:2b:52:c3:8f:37:37:45:16:60:17:f5:b0:b1:c4:0f:3e:
         6d:e0:52:09:a0:1a:26:e5:f3:6d:ec:bf:9d:6a:2c:d0:44:aa:
         b5:cd:ad:0a:d0:fd:9b:16:42:90:8f:c2:f5:df:14:c9:c3:f5:
         6e:80:08:cc:b8:6b:5b:9c:90:4b:ec:e6:ef:0d:55:ac:b1:b5:
         3b:b1:04:e7:66:78:e6:a9:58:ec:8c:ed:9e:e5:8b:ec:3f:85:
         02:ac:08:40
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQFpj9zwPOoCJJdcexE2TcOxwn9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE4OTc4RUEzMjZFMEMxMzVCMTdEQTZEQ0E0NjNFRkM0
RjMxM0ZENzAeFw0yNjA1MjcxMjU2MjJaFw0yNzA1MjYxMzAxMjJaMDMxMTAvBgNV
BAMTKDBCRTdFOUMyNjgyQzJFRjFERUUwQkUyMDYzM0FBNUFBOUMxNTlBOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRzqJDMHQO7Xrr7I10KppEq2zw
TSeRHN7ktQCr0VrL0oxgzvg9PWzvsMHMdBV4dNF3dDjNNUbtvavM1IJrYnB2PxCw
FZuGjfkrS2gu4WqH2bRRnzho6/+S8vOTrR0iMBLtQbYbqRuhvPbMqC6pBgOdXZLo
hpyt3j4H3D7rlsv732KI0whh3FKQsTHcElaEu0jy1BC6wswCE4aKlqCJeoGbBf9g
U4bZbsHrGRe7iBvmT5POXBOgIIHmgvtkZ/WlaGBzMUt1MC0teRHNGZfOAT2vdZKf
1KUdePCKYiA/DE/E38LSVf2tFl7HdVi5yW56W7XhE+VMNzMdh3dKIPrnX1xDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUC+fpwmgsLvHe4L4gYzqlqpwVmpEwHwYDVR0j
BBgwFoAU6ol46jJuDBNbF9ptykY+/E8xP9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM29hOGNUa3Riek1jc1ZvcFphMXNLamlDZ0hia1g1bjM4eGpabnFvTWoy
eXIvMC9FQTg5NzhFQTMyNkUwQzEzNUIxN0RBNkRDQTQ2M0VGQzRGMzEzRkQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBODk3OEVBMzI2RTBDMTM1
QjE3REE2RENBNDYzRUZDNEYzMTNGRDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNvYThjVGt0YnpNY3NWb3BaYTFzS2ppQ2dIYmtYNW4zOHhqWm5xb01qMnlyLzAv
MzEzNzM3MmUzODM1MmUzMjM0MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNjMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxVfMwDQYJKoZIhvcNAQELBQADggEBAAa9kpFu
RE26Fi0Eq3pO13J9I6EDm65rqduFYy/aByHNYsc0Xp7YMGYUVmlrnPuSjzDO1TSB
JO3Tz0vozJMpNdmw7gkH36naZunmrqysXfBEJvQAQhU8/PubgnjeqYYu9MT7Bzb2
v7Ue7H/eiePKIdCyhP8DIM/KgDF12SflphotZLk7aQH4N3SP3dtPKE07y3NWvxjd
0q40PbnSCmxFkEcKYBKUK1LDjzc3RRZgF/WwscQPPm3gUgmgGibl823sv51qLNBE
qrXNrQrQ/ZsWQpCPwvXfFMnD9W6ACMy4a1uckEvs5u8NVayxtTuxBOdmeOapWOyM
7Z7li+w/hQKsCEA=
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:37:26 2026 by rpki-client